Privacy & data protection

Who is responsible

Operator details are being finalized and are not published yet.

What we collect and why

• Account and security data for access and account protection.
• Pilot application and consent data to review expressions of interest and contact applicants.
• Maker, product, order and evidence metadata to provide the requested prototype workflows.
• Buyer and order information for private or consent-gated order records.
• Minimised operational events, rate-limit buckets and logs for security, reliability and aggregate pilot evaluation.

Where processing occurs

The core application currently runs on Scaleway infrastructure in Paris, France.

• Simple Analytics supplies aggregate public-page analytics and receives direct browser requests.
• OpenStreetMap tile infrastructure receives requests when a visitor opens a map.
• Configured email providers process messages sent to or from Craftmark.
• Provider regions, subprocessors and transfer safeguards are reviewed separately; Craftmark does not claim that every request remains in one country.

Cookies

Craftmark uses session, security and language-preference storage. It does not use advertising cookies. Simple Analytics is configured without analytics cookies.

How long we keep it

Records are kept only for their operational, contractual, security or legal purpose. Exact approved periods differ by record category and are documented before controlled pilot onboarding. Immutable evidence snapshots may need to be retained while related legal claims remain possible.

Your rights

Depending on applicable law, you may request access, rectification, export, erasure, restriction or objection, and may complain to the competent data-protection authority.